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© Intrusion detection is afforded for local area net- 
works by including one or more intelligent hub units 
connected to the stations in the network. The intel- 
ligent hub unit maintains a list of codes identifying 
those stations and units connected locally to ports of 
the intelligent hub unit. When a station initiates a 
message on the network, a source identifier code 
unique to the sending station is incorporated in the 
message as specified by the standard access pro- 
tocol. At the intelligent hub unit, the source identifier 
code is recov red from the rec ived message and 
the port at which the message was received is 
identified. The r ceived source id ntifier code is 
compared with the particular entry in the stored list 
of codes corresponding to the identified port. If the 
comparisons fail to generate a matching condition 
between the source identifier and the particular entry 



in the list of codes, then the intelligent hub unit 
generates an alarm indicative of an intrusion on the 
network. 
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